CVE-2012-5195

CVE-2012-5195 is a heap-based buffer overflow in Perl’s Perl_repeatcpy in util.c, affecting Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5. It can cause memory exhaustion and crash (DoS) and may enable arbitrary code execution via the x string repeat operator. Connecte...

CVE-2012-5195

Heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service memory consumption and crash or possibly execute arbitrary code via the 'x' string repea...

Debian DSA-2586-1 : perl - several vulnerabilities

Two vulnerabilities were discovered in the implementation of the Perl programming language : - CVE-2012-5195 The 'x' operator could cause the Perl interpreter to crash if very long strings were created. - CVE-2012-5526 The CGI module does not properly escape LF characters in the Set-Cookie and P3...

[SECURITY] [DSA 2586-1] perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2586-1 [email protected] http://www.debian.org/security/ December 11, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------...

DSA-2586-1 perl - several

Bulletin has no description...

Ubuntu Update for perl USN-1643-1

Ubuntu Update for Linux kernel vulnerabilities USN-1643-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16431.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for perl USN-1643-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

[USN-1643-1] Perl vulnerabilities

========================================================================== Ubuntu Security Notice USN-1643-1 November 30, 2012 perl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

USN-1643-1: Perl vulnerabilities

It was discovered that the decodexs function in the Encode module is vulnerable to a heap-based buffer overflow via a crafted Unicode string. An attacker could use this overflow to cause a denial of service. CVE-2011-2939 It was discovered that the 'new' constructor in the Digest module is...

Security fix for the ALT Linux 6 package perl version 1:5.12.5-alt1.M60P.1

Nov. 10, 2012 Vladimir Lettiev 1:5.12.5-alt1.M60P.1 - 5.12.3 - 5.12.5 - Security fixes: CVE-2011-2728: File::Glob::bsdglob memory error with GLOBALTDIRFUNC CVE-2012-5195: Heap buffer overrun in 'x' string repeat operator - Applied fix for bug 26249...

Perl 5 Memory Corruption Vulnerability

The Perl 5 interpreter is vulnerable to a memory corruption vulnerability which results in memory disclosure and potentially arbitrary code execution when large values are supplied to the x operator. Author: Tim Brown URL: / Product: Perl 5 prior to 5.15.5 Vendor: Perl Risk: Medium Summary The Pe...

CVE-2012-5195

Heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service memory consumption and crash or possibly execute arbitrary code via the 'x' string repea...

CVE-2011-5195

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...

CVE-2011-5195

CVE-2011-5195 describes a CSRF vulnerability in the Open Conference Systems (Public Knowledge Project) component at index/manager/fileUpload. The flaw lets remote attackers hijack administrator sessions for requests that upload a PHP file, affecting versions 2.3.4 and earlier. The underlying issu...

CVE-2010-5195

CVE-2010-5195 affects Roxio MyDVD 9 and is described as an untrusted search path vulnerability. Local attackers can gain privileges by placing a Trojan horse HomeUtils9.dll in the current working directory, with the exploit demonstrated by a directory containing a .dmsd or .dmsm file. Root cause:...

CVE-2011-5195

creationtimestamp| type| source ---|---|--- 2011-12-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18266...

CVE-2008-5195

CVE-2008-5195: Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL via (1) recid in cms/form/read.php and (2) uname in cms/index.php, among other vectors. Base score 7.5 (HIGH); impact partial confidentiality/integrity/availability. The ...

CVE-2008-5195

creationtimestamp| type| source ---|---|--- 2008-06-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5967...

SuSE 10 Security Update : Novell GroupWise client (ZYPP Patch Number 4494)

This update fixes a security vulnerability in the GroupWise system that allows a malicious user to intercept authentication credentials through a 'man in the middle' attack. CVE-2007-5195 / CVE-2007-5196 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

CVE-2007-5195

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

CVE-2007-5195

This CVE refers to an unspecified vulnerability in the SSL implementation of the GroupWise client (novell-groupwise-client) for SUSE Linux Enterprise Desktop 10 that allows remote attackers to obtain credentials via a man-in-the-middle attack (CVE-2007-5195 and related CVE-2007-5196). The connect...